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Once a user has. logged -in 
(or in some way authenticated 

himself), the user will only 
have access to those services 
assigned to his group. 



User 1 
(belonging to 
group A) 



As services or applications 
are added to the system, they will 
be registered with the appropriate 
LookUp Server. Each service will 
have a group access permission 
associated with it. 




Service 1 
(permission to use 
by group A) 



User 2 
(belonging to 
groups A & B) 




Service 2 
(permission to use 
by groups A & B) 



User 3 
(belonging to 
group C) 



LookUp Server 
(group C) 



Service 3 
(permission to use 
by group BJ 



User n 
(belonging to 
group M) 



Each user will 
belong to one or 
more groups for 

access control 
purposes. 



._/ LookUp Server 
(group M) 



One LookUp Server 
will exist for each 
access control group. 
When a new group is 
created, an appropriate 
LookUp Server 
will be started. 



Service x 
(permission to use 
by group M) 



Services represented 
here are user accessible 
services. Other system 
services (like payment, 
authentication, etc.) are 
restricted to use by only 
system level functions. 



FIG. 4 
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